Harden CI digest parsing and failure cleanup

include/Domito.MinCrypt.h

@@ -352,7 +352,7 @@ typedef struct _MINCRYPT_POLICY_INFO
 
 #endif // NTDDI_VERSION >= NTDDI_WIN10
 
-}MINCRYPT_POLICY_INFO, PMINCRYPT_POLICY_INFO;
+}MINCRYPT_POLICY_INFO, *PMINCRYPT_POLICY_INFO;
 #include <poppack.h>
 
 
@@ -491,7 +491,10 @@ typedef MINCRYPT_ALLOCATE_ROUTINE* PMINCRYPT_ALLOCATE_ROUTINE;
 *
 *  @param  PublisherName[out] - publisher name.
 *
-*  @return buffer length.
+*  @return NTSTATUS. The string byte count is returned in PublisherName->Length.
+*  Free PublisherName->Buffer with the allocator paired with AllocateRoutine,
+*  including on failure if a buffer was allocated. This routine extracts a name;
+*  it does not verify the certificate or its signer.
 */
 MINCRYPTAPI
 NTSTATUS